Description (CNA)
OpenDayLight version Carbon SR3 and earlier contain a vulnerability during node reconciliation that can result in traffic flows that should be expired or should expire shortly being re-installed and their timers reset resulting in traffic being allowed that should be expired.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| OpenDayLight / OpenDayLight | affected Carbon SR3 |
CWE
CWE-20
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1533501
- https://jira.opendaylight.org/browse/OPNFLWPLUG-971
ADP enrichment
No English description supplied.